Vulnerability Description
There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. Affected product versions include: CloudEngine 12800 V200R019C10SPC800, V200R019C10SPC900; CloudEngine 5800 V200R019C10SPC800, V200R020C00SPC600; CloudEngine 6800 versions V200R019C10SPC800, V200R019C10SPC900, V200R020C00SPC600, V300R020C00SPC200; CloudEngine 7800 V200R019C10SPC800.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Cloudengine 12800 Firmware | v200r019c10spc800 |
| Huawei | Cloudengine 12800 | - |
| Huawei | Cloudengine 5800 Firmware | v200r019c10spc800 |
| Huawei | Cloudengine 5800 | - |
| Huawei | Cloudengine 6800 Firmware | v200r019c10spc800 |
| Huawei | Cloudengine 6800 | - |
| Huawei | Cloudengine 7800 Firmware | v200r019c10spc800 |
| Huawei | Cloudengine 7800 | - |
Related Weaknesses (CWE)
References
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220112-01-invaliVendor Advisory
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220112-01-invaliVendor Advisory
FAQ
What is CVE-2021-40042?
CVE-2021-40042 is a vulnerability with a CVSS score of 6.5 (MEDIUM). There is a release of invalid pointer vulnerability in some Huawei products, successful exploit may cause the process and service abnormal. Affected product versions include: CloudEngine 12800 V200R01...
How severe is CVE-2021-40042?
CVE-2021-40042 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-40042?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Cloudengine 12800 Firmware, Huawei Cloudengine 12800, Huawei Cloudengine 5800 Firmware, Huawei Cloudengine 5800, Huawei Cloudengine 6800 Firmware.